Design Intoto targeted by RansomHub in reported data breach

• Ransomware group: RansomHub
• Country: Australia
• Sector: Professional Services
• Announcement date: April 25, 2024

The RansomHub ransomware group has published an announcement on its leak site claiming responsibility for a significant data breach involving the Australian professional services firm, Design Intoto. According to the group's claims, they have successfully infiltrated the organization's network and exfiltrated a substantial volume of confidential information.

Details of the alleged attack

The RansomHub group claims to have gained unauthorized access to the networks belonging to Design Intoto. Following the initial breach, the group asserts that they conducted an analysis of the firm's business operations to identify valuable information. The group states that they have stolen confidential data and are currently demanding a ransom from the organization.

The threat actors have issued a warning that they will release the stolen information publicly if a settlement or deal is not reached with them. This announcement was officially published on the group's leak site on April 25, 2024, although the group claims the actual attack occurred on April 16, 2024. RansomHub is identified as a Ransomware-as-a-Service (RaaS) group that emerged in early 2024. Reports suggest the group incorporated former affiliates of the ALPHV group, and it is noted that the group reportedly ceased operations in early 2025.

Data involved in the claim

While the group has made significant claims regarding the volume of information stolen, the specifics regarding the nature of the files remain unclear. The announcement mentions that the total amount of stolen data is approximately 700 GB. However, the listing does not provide details regarding the specific types of data or the exact file count involved in the incident.

• 700 GB of confidential data

The listing names no specific data types beyond the general description of confidential information.

About Design Intoto

Design Intoto is an interior design and architecture firm based in Australia. The company provides a variety of professional services, including design, planning, and project management for both commercial and residential projects.

Risk assessment and industry implications

This claim poses a potential risk to the operational continuity of the institution. In the event that the data is leaked, the organization may face legal sanctions and administrative fines under the Australian Privacy Act 1988. Furthermore, the exposure of personal information could lead to significant reputational damage and leave the institution vulnerable to targeted phishing attacks by third parties.

This incident highlights the growing threat of double extortion, a tactic where ransomware actors not only encrypt an organization's data but also steal it to use as leverage for extortion. In such scenarios, even if an organization can restore its systems from backups, the threat of public data exposure remains a primary motivator for ransom demands. The publication of such data can lead to secondary security risks that persist long after the initial breach is remediated.

For organizations in the professional services sector, maintaining robust security postures is critical to mitigating these risks. This typically involves implementing multi-factor authentication, maintaining strict network segmentation, and ensuring comprehensive logging and monitoring to detect unauthorized access early. Furthermore, organizations must prepare for the regulatory consequences of data exposure by maintaining compliance with local privacy laws and developing incident response plans that account for both operational recovery and data breach notification requirements.